Solved

Search all GPOs at once

Posted on 2007-03-19
7
215 Views
Last Modified: 2012-05-05
I am using Windows Server 2003 Standard Edition, SP1 and I was wondering if there is any way to search all my GPOs at once?  I have a policy that is pushing a PowerUser group but I have no idea which policy it is.  Thanks!
0
Comment
Question by:cnalley
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 3
  • 2
  • 2
7 Comments
 
LVL 51

Expert Comment

by:Netman66
ID: 18751971
Wait for Longhorn!  LOL....

Unfortunately, this is the pain point of GPOs - right now there is no easy way to do this.  You can run GPRESULT on the client machine and see exactly what policies are being applied to that workstation.  It's under the Computer Configuration.

0
 

Author Comment

by:cnalley
ID: 18752032
Thanks Netman66!

How about a third-party application.  Does anyone know of some add-on that can search all the GPOs for a phrase or something?  
0
 
LVL 48

Expert Comment

by:Jay_Jay70
ID: 18752142
you can run rsop.msc on any machine within the domain and it will show you which policy is forcing the setting......it will only show policies that apply to itself however
0
Online Training Solution

Drastically shorten your training time with WalkMe's advanced online training solution that Guides your trainees to action. Forget about retraining and skyrocket knowledge retention rates.

 

Author Comment

by:cnalley
ID: 18752647
Thanks Jay Jay,
rsop only works for policies set with the standard settings.  We are using Policy Maker Pro which extends GPOs and they do not show in rsop so we really need something that will actually search through all the GPOs.
0
 
LVL 48

Expert Comment

by:Jay_Jay70
ID: 18752692
this is true :) sorry i didnt think about that little fact :)
0
 
LVL 51

Accepted Solution

by:
Netman66 earned 500 total points
ID: 18752840
All the settings are simple INI's that are stored in SYSVOL\domain\policies - you may get a script to look at each for Restricted Groups - it'll only be present if the setting has been made.

Once found, then the GUID of the policy is the foldername and can be found in ADUC with Advanced turned on.

0
 

Author Comment

by:cnalley
ID: 18757499
You are a genius Netman!  Thank you so much.  

I'm using GPMC so I had to go to Group Policies and look at each one to find the GUID of the policy I was looking for but that was a much easier needle find in my haystack of GPOs.

0

Featured Post

Free Tool: Site Down Detector

Helpful to verify reports of your own downtime, or to double check a downed website you are trying to access.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

This article describes my battle tested process for setting up delegation. I use this process anywhere that I need to setup delegation. In the article I will show how it applies to Active Directory
Active Directory security has been a hot topic of late, and for good reason. With 90% of the world’s organization using this system to manage access to all parts of their IT infrastructure, knowing how to protect against threats and keep vulnerabil…
This Micro Tutorial hows how you can integrate  Mac OSX to a Windows Active Directory Domain. Apple has made it easy to allow users to bind their macs to a windows domain with relative ease. The following video show how to bind OSX Mavericks to …
This video shows how to use Hyena, from SystemTools Software, to update 100 user accounts from an external text file. View in 1080p for best video quality.

738 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question